Do not use object-groups in ipsec permit statements. You will notice immediately after applying object-groups to your ipsec statement ACL you will no longer be able to access the outside interface using SSH or other. Also, the tunnel will become unst...